Description
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user.
Unscored
CVE-2019-20139
EUVD-2019-10695GHSA-vxr3-fcvj-wxgq
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequ…
Published Dec 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre